Effective date: 1 October 2026 · ISOE – International School of Education
1. Introduction
ISOE – International School of Education is committed to protecting your privacy and handling your personal data with transparency, care, and respect. This Privacy Policy explains what information we collect, why we collect it, and how we use, store, and protect it when you engage with our training programmes, digital platforms, and services.
By registering for a course, using any ISOE platform, or communicating with us, you acknowledge the practices described in this Policy. If you do not agree, please do not use our services.
2. Who We Are
ISOE – International School of Education was formally founded in 2020 and delivers technology-oriented training and professional development programmes to learners across multiple countries, with an international cohort spanning Germany, Spain, Saudi Arabia, Pakistan, India, and beyond.
For the purposes of this Policy, ISOE acts as the data controller for personal information you provide directly to us. Where we partner with universities, corporate clients, or ed-tech organisations to deliver training, joint controller arrangements or separate data processing agreements may apply.
3. Information We Collect
We collect information in three ways: directly from you when you register or engage with us; automatically when you use our digital platforms; and from partner organisations where you enrol through them.
Account & Registration Data
- Full name, email address, and phone number
- Country of residence and nationality
- Academic or professional background provided at enrolment
- Username and password (stored encrypted — we never store plaintext passwords)
Learning & Programme Data
- Courses enrolled in and completion records
- Assessment scores, project submissions, and instructor feedback
- Certificates and credentials issued by ISOE
- Attendance records for remote and live sessions
Payment Information
We do not store full card or banking details on our servers. Payment processing is handled exclusively by authorised third-party payment providers. ISOE retains only transaction references and amounts for financial record-keeping.
Communications Data
- Messages sent to our admissions, support, or partnership teams
- Survey and feedback responses
- Marketing preferences and email engagement records
Technical Data
- IP address, browser type, and device information
- Platform usage data — pages visited, features used, session duration
- Server logs retained for security monitoring and service improvement
4. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Delivering and administering training programmes | Registration data, learning records |
| Issuing certificates and verifying completions | Learning records, identity data |
| Processing enrolment and payments | Registration data, payment references |
| Communicating about courses, schedules, and updates | Contact details, communication preferences |
| Improving platform quality and learning outcomes | Usage data, feedback, assessment patterns |
| Ensuring platform security and preventing fraud | Technical data, account data |
| Sending marketing communications (with consent) | Email address, preferences |
| Reporting to institutional partners | Anonymised, aggregate learning outcomes only |
5. Legal Basis for Processing
Where applicable data protection law requires a legal basis for processing, we rely on the following:
- Contractual necessity — to fulfil your enrolment agreement and deliver the services you have signed up for.
- Legitimate interests — to improve our programmes, maintain platform security, and understand how our services are used, balanced against your rights.
- Consent — for direct marketing communications. You may withdraw consent at any time by unsubscribing or contacting us.
- Legal obligation — to comply with applicable law, tax requirements, or regulatory reporting obligations.
6. Sharing Your Information
We do not sell your personal data to any third party. We may share it only in the following circumstances, and only to the extent strictly necessary:
- Institutional partners — universities, corporate clients, or ed-tech platforms through which you enrolled, for programme administration and outcome reporting.
- Technology providers — cloud infrastructure, video conferencing, and platform vendors who process data on our behalf under binding data processing agreements.
- Industry partners — where ISOE collaborates with companies including in AI development, any shared insights are anonymised or aggregated. Individually identifiable data is never shared without your explicit consent.
- Certification and credential bodies — where you request or authorise a certificate to be verified by a third party.
- Legal and regulatory authorities — when required by law, court order, or to protect the safety and rights of ISOE and its learners.
7. International Data Transfers
ISOE serves learners across multiple countries and operates with international academic and technology partners. As a result, your data may be transferred to and processed in countries other than your country of residence, including Pakistan, Germany, and the United States.
Where transfers originate from the EEA or UK to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other lawful transfer mechanisms, to ensure your data remains protected to EEA standards.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Once data is no longer required, it is securely deleted or anonymised.
| Data Type | Retention Period |
|---|---|
| Account and registration records | Duration of relationship + 5 years |
| Certificates and course completion records | Indefinitely, for verification purposes |
| Payment transaction references | 7 years (financial record obligations) |
| Marketing communications data | Until consent withdrawn, or 3 years of inactivity |
| Technical and server logs | 90 days |
| Support correspondence | 3 years |
9. Your Rights
Depending on where you are based, you may have the following rights in relation to your personal data. To exercise any right, contact privacy@isoe-int.com — we will respond within 30 calendar days.
Request a copy of the personal data we hold about you.
Ask us to correct inaccurate or incomplete information.
Request deletion of your data, subject to legal obligations.
Ask us to limit how we process your data in certain circumstances.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent for marketing at any time.
File a complaint with your local data protection authority.
10. Security
We apply appropriate technical and organisational safeguards to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted data storage and transmission (TLS), access controls restricted to authorised personnel on a need-to-know basis, and regular security reviews of our systems and practices.
While we take reasonable precautions, no method of data transmission or storage over the internet is entirely immune to risk. If you suspect any unauthorised access to your account, please notify us immediately at privacy@isoe-int.com.
11. Cookies & Tracking
We use cookies and similar tracking technologies to operate and improve our platforms. These fall into the following categories:
- Essential cookies — required for authentication, session management, and platform security. These cannot be disabled without affecting core functionality.
- Analytics cookies — used to understand how learners navigate and use our platform. These require your prior consent.
- Preference cookies — remember your settings, language, and accessibility preferences across sessions.
You can manage or withdraw your cookie consent at any time through your browser settings or any consent management tool we provide on our platforms.
12. Minors
ISOE's programmes are designed for adult and professional learners. We do not knowingly collect personal data from individuals under the age of 16 without verifiable parental or guardian consent.
If you believe a minor has provided personal information to us without appropriate consent, please contact us at privacy@isoe-int.com and we will take prompt action to review and, where appropriate, delete such data.
13. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our services, data practices, or legal requirements. When we make material changes, we will notify registered learners by email at least 14 days before the changes take effect, and update the effective date shown at the top of this document.
Continued use of our services after the effective date of any revision constitutes acceptance of the updated Policy. Previous versions of this Policy are available on request.
14. Contact Us
For any questions, requests, or concerns regarding this Privacy Policy or how we handle your personal data, please reach out to our privacy team. We aim to acknowledge all requests within 5 working days and resolve them within 30 calendar days.
Include "Privacy Request" in your subject line for faster handling.
Privacy & Data Team — ISOE
If you are located in the European Economic Area or United Kingdom and believe your data protection rights have not been upheld, you have the right to lodge a complaint with your national data protection supervisory authority.